I see Facebook Connect as a tool in the signup arsenal. Using it can accelerate a users signup process, but it's should still initiate a proceedure for creating

I see Facebook Connect as a tool in the signup arsenal. Using it can accelerate a users signup process, but it's should still initiate a proceedure for creating a user in your own database. The user can then add Twitter and/or openID (you do support them, right?) and signin how they see fit. However, there is a security concern. Abusing other peoples Facebook/Twitter accounts is quite common (frape for want of a better word). People do not sign out of Facebook (I don't), so blindly allowing access to sensitive data like this could be an issue. How about quickly asking for their password? Very few will be offended, and those that are should be cut down to size with an explaination of how security concious you are.